Communication device, mobile object, control system, server, and communication control method

Abstract

A communication device is provided in a mobile body and communicates with an external server. The communication device includes a communication control unit that controls communication with the server, controls communication with the mobile body control unit, and controls communication with an update control unit that controls the mobile body and controls program updates for the mobile body control unit. When the mobile body control unit is controlled by the server, the communication control unit receives a first activation request and a command from the server for the mobile body control unit, activates the mobile body control unit in response to the first activation request and command from the server, and controls the mobile body control unit in response to the command. When the mobile body control unit is controlled by the server regarding program updates for the mobile body control unit, the communication control unit receives a second activation request from the server for the update control unit, and activates the update control unit in response to the second activation request from the server.

Description

Technical Field

[0001] The present invention relates to a communication device, a mobile object, a control system, a server, and a communication control method. Background Art

[0002] Patent Document 1 discloses an ECU capable of rewriting application programs as an ECU for a vehicle.

[0003] Patent Document 1: Japanese Patent Application Laid-Open No. 2020-27666. Summary of the Invention

[0004] In a first embodiment, a communication device is provided. The communication device is provided in a mobile body and communicates with an external server. The communication device includes a communication control unit that controls communication with the server, controls communication with the mobile body control unit, and controls communication with an update control unit that controls the mobile body and controls program updates for the mobile body control unit. When the mobile body control unit is controlled by the server, the communication control unit receives a first startup request and a command from the server for the mobile body control unit, activates the mobile body control unit based on the first startup request and command from the server, and controls the mobile body control unit based on the command. When the mobile body control unit is controlled by the server in connection with program updates for the mobile body control unit, the communication control unit receives a second startup request from the server for the update control unit, and activates the update control unit based on the second startup request from the server.

[0005] After instructing the update control unit to activate, the communication control unit may perform control to transmit information indicating that the update control unit has been activated to the server if the update control unit has been activated.

[0006] The communication device receives a third activation request from the server before receiving the second activation request from the server. After the communication device is activated in response to the third activation request, the communication control unit may perform control to receive the second activation request from the server.

[0007] The communication device may receive the third activation request via the circuit switching network of the mobile communication network. After the communication device is activated in response to the third activation request, the communication control unit may control communication with the server via the packet switching network.

[0008] If communication with the server via a wireless LAN (Local Area Network) is possible, the communication control unit may, after the update control unit is activated, perform communication between the update control unit and the server via the wireless LAN. If communication with the server via the wireless LAN is not possible, the communication control unit may, after the update control unit is activated, relay communication between the update control unit and the server via the mobile communication network.

[0009] The mobile object may be a vehicle.

[0010] According to a second aspect, a mobile object is provided. The mobile object includes the above-mentioned communication device.

[0011] A third aspect provides a control system including the above-mentioned communication device, a moving object control unit, and an update control unit.

[0012] In a fourth aspect, a server is provided. The server is provided to a control unit of a mobile object and transmits a command. The server includes a communication unit that, when transmitting a command to the control unit, transmits request information for activating the control unit to a communication device provided in the mobile object, and transmits the command to the control unit in response to receiving the command request from the control unit.

[0013] In a fifth aspect, a communication control method is provided. The communication control method is performed by a communication device that is provided in a mobile body and communicates with a server. The communication device controls communication with the server, and also controls communication with a mobile body control unit that controls the mobile body and an update control unit that controls program updates for the mobile body control unit. The communication control method includes the following steps: when the mobile body control unit is controlled by the server, the communication method receives a first startup request and a command from the server for the mobile body control unit, activates the mobile body control unit based on the first startup request and command from the server, and controls the mobile body control unit based on the command. The communication control method includes the following steps: when the mobile body control unit is controlled by the server regarding program updates for the mobile body control unit, the communication method receives a second startup request from the server for the update control unit, and activates the update control unit based on the second startup request from the server.

[0014] In addition, the above summary of the invention does not list all the necessary features of the present invention. In addition, the combination of branch features among the above multiple features can also constitute an invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 An updating system 10 is schematically shown in accordance with one embodiment.

[0016] Figure 2 The system configuration of the control system 200 is schematically shown.

[0017] Figure 3 The system structure of the server 70 is shown.

[0018] Figure 4 An example of a time diagram related to program update is schematically shown.

[0019] Figure 5 A processing sequence in the case where the server 70 executes processing related to program updating is schematically shown.

[0020] Figure 6 The processing sequence in the case where the server 70 performs remote operation of the vehicle 20 is schematically shown.

[0021] Figure 7 An example of a computer 2000 is shown that can embody various embodiments of the present invention in whole or in part. DETAILED DESCRIPTION

[0022] The present invention will be described below by way of embodiments of the invention, but the following embodiments are not intended to limit the invention as defined in the claims. Furthermore, not all combinations of features described in the embodiments are essential for achieving the solution of the invention.

[0023] Figure 1 An update system 10 according to one embodiment is schematically shown. Update system 10 includes a vehicle 20 and a server 70. Vehicle 20 includes a control system 200. Control system 200 is responsible for controlling vehicle 20 and communicating with server 70 via a communication network 90. ​​Communication network 90 includes IP networks such as the Internet, peer-to-peer networks, dedicated lines including VPNs, virtual networks, and mobile communication networks.

[0024] In the vehicle 20, the control system 200 has a plurality of ECUs (Electronic Control Units) that control the vehicle 20. The server 70 performs control related to reprogramming of the ECUs possessed by the control system 200. For example, the server 70 sends an update program to the control system 200 via the communication network 90, and the control system 200 uses wireless communication to receive the update program sent via the communication network 90. ​​The control system 200 reprograms the ECUs possessed by the control system 200 using the update program. Reprogramming is performed for the purpose of upgrading the functions of the ECUs possessed by the control system 200. In this way, the control system 200 reprograms the ECUs using OTA (Over The Air), thereby updating the ECUs. In this embodiment, the situation in which devices such as ECUs are updated by updating programs is referred to as "program update."

[0025] When controlling program updates of ECUs included in control system 200, server 70 activates the ECUs controlling program updates through a communication device included in control system 200. Server 70 then transmits a command related to program updates to the ECUs controlling program updates.

[0026] Meanwhile, server 70 has the function of remotely controlling vehicle 20. For example, to remotely lock the locking device of the door of vehicle 20, server 70 transmits a remote command instructing the locking device to lock to vehicle 20. Upon receiving the remote command from server 70, the communication device included in control system 200 interprets the remote command and issues a command to lock the locking device to the ECU that controls the locking device.

[0027] As described above, when controlling a program update for an ECU included in control system 200, the communication device included in control system 200 activates the ECU responsible for controlling the program update, and the ECU responsible for controlling the program update receives commands related to the program update from server 70. Therefore, when adding new commands related to program updates, while changes may be required to the operation of server 70 and the processing of the ECU responsible for controlling the program update, changes do not need to be made to the operation of the communication device included in control system 200. Consequently, there is no need to verify the operation of the communication device. Consequently, changing or adding commands related to program updates becomes easier.

[0028] In this embodiment, for convenience, the server 70 is described as a server for remotely operating the vehicle 20 and performing processing related to program updates. However, the server for remotely operating the vehicle 20 and the server for performing processing related to program updates may be provided separately.

[0029] Figure 2 The system structure of the control system 200 is schematically shown. The control system 200 includes a communication device 210, an ECU 202, an ECU 204, an ECU 205, an ECU 206, an MID 298, and an IVI 299. The communication device 210 includes a TCU 201 and an antenna 211. Figure 2 FI 294 , battery 295 , and locking device 296 are devices included in vehicle 20 . FI 294 , battery 295 , and locking device 296 are examples of controlled devices in vehicle 20 .

[0030] ECU 202 is connected to TCU 201, ECU 204, ECU 205, and ECU 206 via in-vehicle communication network 280. ECU 202 communicates information with TCU 201, ECU 204, ECU 205, ECU 206, MID 298, and IVI 299 via in-vehicle communication network 280. ECU 202 comprehensively controls TCU 201, ECU 204, ECU 205, ECU 206, MID 298, and IVI 299. In-vehicle communication network 280 can be configured to include, for example, CAN (Controller Area Network) or Ethernet. In-vehicle communication network 280 is an example of a "communication path" serving as a path for information communication.

[0031] The TCU 201 is a telematics control unit. The TCU 201 is primarily responsible for mobile communications. Under the control of the ECU 202 , the TCU 201 transmits and receives data to and from the server 70 . Under the control of the ECU 202 , the TCU 201 receives update programs sent from the server 70 using mobile communications.

[0032] MID 298 is a multi-function information display. IVI 299 is, for example, an in-vehicle entertainment (IVI). MID 298 and IVI 299 function as a display control unit. IVI 299 has wireless LAN communication capabilities. Under the control of ECU 202, IVI 299 receives update programs sent from server 70 via wireless LAN communication.

[0033] ECU 204, ECU 205, and ECU 206 are each an ECU that serves as a vehicle control unit for controlling vehicle 20. ECU 204, ECU 205, and ECU 206 are examples of a "mobile body control unit." ECU 204, ECU 205, and ECU 206 control various devices included in vehicle 20. For example, ECU 204 controls FI 294, a fuel injection device. ECU 205 controls battery 295, a high-voltage battery. ECU 206 controls locking device 296, etc.

[0034] In this embodiment, the control system 200 is illustrated as including a TCU 201, ECU 202, ECU 204, ECU 205, ECU 206, MID 298, and IVI 299. However, the system configuration of the control system 200 is not limited to the example in this embodiment. Furthermore, in this embodiment, ECU 202 is the ECU that controls program updates. In other words, ECU 202 functions as an update control unit that controls program updates. Furthermore, the program updates can target ECUs 202 to 206. However, the TCU 201, ECU 202, or IVI 299, etc., can also target the program updates.

[0035] TCU 201 is installed in vehicle 20 and communicates with an external server 70. TCU 201 controls communication with server 70, as well as communication with ECUs 203-206 that control vehicle 20, and with ECU 202 that controls program updates for ECUs 203-206. When controlling ECUs 203-206 from server 70, TCU 201 receives a first activation request and command from server 70 for ECUs 203-206, activates ECUs 203-206 in response to the first activation request and command from server 70, and controls ECUs 203-206 in response to the command. When controlling ECUs 203-206 from server 70 regarding program updates for ECUs 203-206, TCU 201 receives a second activation request from server 70 for ECU 202, and activates ECU 202 in response to the second activation request from server 70.

[0036] After instructing the ECU 202 to start up, the TCU 201 performs control to transmit information indicating that the ECU 202 has started up to the server 70 if the ECU 202 has started up.

[0037] Communication device 210 receives the third activation request to TCU 201 from server 70 before receiving the second activation request from server 70. After communication device 210 is activated in response to the third activation request, TCU 201 performs control to receive the second activation request from server 70.

[0038] Communication device 210 receives the third activation request via the circuit switched network of the mobile communication network. For example, TCU 201 receives the third activation request via SMS (Short Message Service). After communication device 210 is activated in response to the third activation request, TCU 201 controls communication with server 70 via the packet switched network. For example, TCU 201 controls communication via the packet switched network of the mobile communication network.

[0039] If communication with the server 70 via the wireless LAN is possible, the TCU 201 can perform communication via the wireless LAN between the ECU 202 and the server 70 after the ECU 202 is activated. If communication with the server 70 via the wireless LAN is not possible, the TCU 201 relays communication via the vehicle 20 communication network between the ECU 202 and the server 70 after the ECU 202 is activated.

[0040] Here, program updates are explained. This describes the program update process when the device targeted for program updates is an ECU and the memory used to store the ECU's firmware is a single-bank memory (single-bank memory, so-called single-side ROM). In this case, the ECU has a single program storage area for storing the firmware. Therefore, if the ECU operates according to the program stored in the program storage area, the update program cannot be written to the program storage area. When performing an ECU program update, ECU 202 transfers the update program to the ECU, stores the update program in a predetermined data storage area of ​​the ECU, and then instructs the ECU to perform a program update. When instructed to perform a program update, the ECU executes program update control code, writes the update program transferred to the data storage area to the program storage area, and activates the update program. Activating the update program includes setting the ECU's startup parameters so that, for example, the update program is loaded at startup and control based on the updated program begins. Furthermore, when the memory used to store the ECU's firmware is a single-bank memory, "a state in which the ECU program can be updated" may refer to a state in which the update program is stored in the predetermined data storage area of ​​the ECU.

[0041] Next, the program update process will be described when the ECU's internal memory is a dual-bank memory (so-called double-sided ROM). In this case, the ECU has two program storage areas for storing firmware. Therefore, while the ECU is operating according to the program stored in the first program storage area, the update program can be written to the second program storage area. For example, even while vehicle 20 is moving, the update program can be written to the second program storage area. Therefore, when transferring the update program to the ECU, ECU 202 instructs the ECU to write the update program to the second program storage area. When the update program is written to the ECU's second program storage area, the ECU becomes ready for program updates. When ECU 202 performs an ECU program update, ECU 202 instructs the ECU to activate the update program written to the second program storage area. Activating the update program includes setting the ECU's startup parameters so that, when the ECU is started, for example, the update program stored in the second program storage area is loaded and control based on the updated program begins. For example, activating an update program includes activating the second program storage area as a program read area and deactivating the first program storage area as a program read area. Thus, "ECU program update" encompasses writing an update program to an ECU's program storage area. Furthermore, "ECU program update" encompasses activating an update program written to a program storage area.

[0042] Figure 3 1 shows the system configuration of the server 70. The server 70 includes a communication unit 390, a storage unit 380, and a processing unit 300.

[0043] Processing unit 300 is implemented by, for example, a calculation processing device including a processor. Storage unit 380 is implemented as a non-volatile storage medium. Processing unit 300 performs processing using information stored in storage unit 380. Communication unit 390 is responsible for communication with multiple vehicles including vehicle 20.

[0044] Server 70 transmits commands to control units such as the ECU or TCU installed in vehicle 20. When transmitting commands to an ECU in vehicle 20, communication unit 390 transmits request information to TCU 201 to activate the ECU. In response to receiving a command request from the ECU, the server 70 transmits commands to the ECU. This eliminates the need to modify the processing of TCU 201 when adding or modifying commands.

[0045] In this embodiment, when transmitting a command related to program update to ECU 202, communication unit 390 transmits request information to TCU 201 to activate ECU 202, and transmits a command to ECU 202 in response to receiving the command request from ECU 202. On the other hand, when causing ECUs 202 to 206 to perform control other than program update, communication unit 390 transmits a command related to control of ECUs 202 to 206 to TCU 201, allowing TCU 201 to control the ECU being controlled.

[0046] Figure 4 An example of a time diagram related to program update is schematically shown. Figure 4 The states of the IG switch, TCU 201 , and ECU 202 are shown.

[0047] At time t1, after the user turns off the IG switch, server 70 downloads the update program to ECU 202. In this case, at time t2, communication unit 390 of server 70 transmits a startup request to TCU 201. Communication unit 390 transmits the startup request via SMS. TCU 201 starts up in response to the startup request transmitted from server 70.

[0048] When TCU 201 starts up, at time t3, communication unit 390 transmits a start-up request to ECU 202 to TCU 201. Upon receiving the start-up request from ECU 202, TCU 201 starts ECU 202. When ECU 202 starts up, communication unit 390 of server 70 transmits a download request for an update program to ECU 202. Upon receiving the download request from server 70, ECU 202 begins downloading the update program from server 70.

[0049] After the update program download is complete, at time t5, when the IG switch is turned on, ECU 202 performs a process to obtain confirmation from the vehicle 20 passenger regarding the execution of the program update. For example, ECU 202 obtains confirmation from the vehicle 20 passenger via IVI 299. Upon receiving confirmation from the vehicle 20 passenger regarding the execution of the program update, ECU 202 begins writing the program to the ECU targeted for program update. For example, ECU 202 transfers the update program to the ECU targeted for program update and instructs the ECU targeted for program update to write the update program. When writing is complete, ECU 202 instructs the ECU targeted for program update to activate the program.

[0050] In addition, Figure 4, describes a case where server 70 downloads an update program while the IG of vehicle 20 is turned off. This update program download can be performed while vehicle 20 is parked at night. In addition to downloading the update program at night, examples of cases where server 70 remotely activates ECU 202 include remotely executing the update after downloading the update program and setting a time limit until the program update is complete.

[0051] Figure 5 The following schematically shows a processing sequence when the server 70 executes processing related to program update. In S302, the communication unit 390 of the server 70 transmits a startup request to the TCU 201. The communication unit 390 transmits the startup request to the TCU 201 via SMS.

[0052] In S304, TCU 201 starts up upon receiving a startup request from server 70 via SMS. When startup is complete, TCU 201 sends a command request to server 70 in S306. Furthermore, TCU 201 communicates with server 70 after startup via a packet-switched network. For example, TCU 201 communicates with server 70 using the https protocol.

[0053] In S308, communication unit 390 of server 70 transmits a start request for ECU 202 to TCU 201. Upon receiving the start request for ECU 202 from server 70, TCU 201 activates ECU 202 in S310. At this time, TCU 201 transmits the start request to ECU 202 via the CAN in in-vehicle communication network 280.

[0054] In S312, when ECU202 receives a startup request for ECU202 via CAN, it performs startup processing. When the startup of ECU202 is completed, in S314, an Ethernet (registered trademark) communication link is established between ECU202 and TCU201. After the Ethernet communication link between TCU201 and ECU202 is established, in S316, the startup request received from server 70 via SMS is sent to ECU202 via the established communication link. In addition, TCU201 sends a response to the startup request to server 70. At this time, if ECU202 is started normally, TCU201 can make a positive response indicating that ECU202 has been started. If ECU202 is not started normally, TCU201 can make a negative response indicating that ECU202 has not been started.

[0055] In S320, ECU 202 transmits a command request to server 70. In S322, in response to receiving the command request, communication unit 390 of server 70 transmits a remote command to ECU 202. In S324, ECU 202 performs processing corresponding to the remote command received from server 70 in S322.

[0056] Furthermore, communication between ECU 202 and server 70 in S320 and S322 can be performed via TCU 201. Furthermore, if a wireless LAN connection is established between the control system 200 and an external access point, ECU 202 can communicate with server 70 via the wireless LAN. If a wireless LAN connection is established between the control system 200 and an external access point, TCU 201 can instruct ECU 202 to communicate with server 70 via the wireless LAN. If the wireless LAN function of the control system 200 can only be utilized when the IG switch is on, control can be performed so that mobile communication is used for communication with server 70 when the IG switch is off, and wireless LAN is used for communication with server 70 when the IG switch is on.

[0057] Figure 6 The processing sequence when the server 70 performs remote operation of the vehicle 20 is schematically shown. The processing from S402 to S406 is the same as that of Figure 3 That is, when the communication unit 390 of the server 70 transmits a startup request to the TCU 201 via SMS (S402), the TCU 201 starts up in response to the startup request received from the server 70 (S404), and when the startup is completed, a command request is sent to the server 70 in S406.

[0058] In S408, the communication unit 390 of the server 70 transmits the activation request and the remote command from the ECU 206 to the TCU 201. The remote command transmitted in S408 is a command instructing the locking device 296 to lock. Upon receiving the activation request from the server 70 for the ECU 206, the TCU 201 analyzes the remote command in S410 and generates an internal command for the ECU 206 to lock the locking device 296.

[0059] In S412, ECU 206 is activated. TCU 201 can transmit a startup request to ECU 206 via the CAN in in-vehicle communication network 280. In S414, upon receiving the startup request to ECU 206 via the CAN, ECU 206 performs startup processing. When ECU 206 is activated, TCU 201 transmits the internal command generated in S410 to ECU 206. In S420, ECU 206 performs processing corresponding to the internal command received in S418.

[0060] As described above, according to the update system 10 of this embodiment, when performing control related to program updates for ECUs included in the control system 200, the TCU 201 activates the ECU 202, which then requests and receives program update-related commands from the server 70. Therefore, even if new program update-related commands are required, the operation of the TCU 201 does not need to be modified. Consequently, verification of the TCU 201 is also unnecessary. Consequently, it is easy to modify or add program update-related commands.

[0061] In addition, the vehicle 20 is a vehicle as an example of a transport device. The vehicle may be a car with an internal combustion engine, an electric car, a fuel cell vehicle (FCV), or the like. Cars include buses, trucks, two-wheeled vehicles, and the like. The vehicle may be a saddle-type vehicle or a motorcycle. As transport devices, in addition to vehicles, there are also aircraft including drones, ships, and other equipment. Transport devices may be any device that transports people or goods. Transport devices are an example of a mobile body. The mobile body is not limited to transport devices, and may be any movable device.

[0062] Figure 7 An example of a computer 2200 capable of embodying, in whole or in part, various embodiments of the present invention is shown. Programs installed in computer 2200 can cause computer 2000 to function as a control system, communication device, or components thereof, according to the embodiments; can cause computer 2000 to perform operations associated with the devices or components thereof; and / or can cause computer 2000 to execute processes or steps thereof according to the embodiments. Such programs can be executed by CPU 2012 to cause computer 2000 to perform specific operations associated with the processing steps described in this specification and with some or all of the items in the blocks of the block diagrams.

[0063] The computer 2000 of this embodiment includes a CPU 2012 and a RAM 2014, which are interconnected by a main controller 2010. The computer 2000 also includes a ROM 2026, a flash memory 2024, a communication interface 2022, and an input / output chip 2040. The ROM 2026, the flash memory 2024, the communication interface 2022, and the input / output chip 2040 are connected to the main controller 2010 via the input / output controller 2020.

[0064] The CPU 2012 operates according to the programs stored in the ROM 2026 and the RAM 2014 , thereby controlling each unit.

[0065] The communication interface 2022 communicates with other electronic devices via a network. The flash memory 2024 stores programs and data that can be used by the CPU 2012 in the computer 2000. The ROM 2026 stores programs such as a boot program executed by the computer 2000 when activated, and / or programs that depend on the hardware of the computer 2000. The input / output chip 2040 can also connect various input / output units such as a keyboard, mouse, and display to the input / output controller 2020 via input / output ports such as a serial port, parallel port, keyboard port, mouse port, display port, USB port, and HDMI (registered trademark) port.

[0066] The program is provided via a computer-readable storage medium such as a CD-ROM, DVD-ROM, or memory card, or via a network. RAM 2014, ROM 2026, or flash memory 2024 are examples of computer-readable storage media. The program is installed into flash memory 2024, RAM 2014, or ROM 2026 and executed by CPU 2012. The information processing described in these programs is read into computer 2000, providing a link between the program and the various types of hardware resources described above. The apparatus or method can be constructed by a process that implements information manipulation or processing as computer 2000 is used.

[0067] For example, when communication is performed between the computer 2000 and an external device, the CPU 2012 may execute a communication program loaded in the RAM 2014 and, based on the processing described in the communication program, instruct the communication interface 2022 to perform communication processing. Under the control of the CPU 2012, the communication interface 2022 reads transmission data stored in a transmission buffer processing area provided in a recording medium such as the RAM 2014 and the flash memory 2024, transmits the read transmission data to the network, and writes reception data received from the network to a reception buffer processing area provided on the recording medium.

[0068] Alternatively, the CPU 2012 may execute various processes on the data in the RAM 2014 so that all or a required portion of a file or database stored in a recording medium such as the flash memory 2024 is read into the RAM 2014. The CPU 2012 then writes the processed data back to the recording medium.

[0069] It is possible that various types of information such as various types of programs, data, data tables, and databases are stored in a recording medium and subjected to information processing. CPU2012 can perform various operations described in this specification and specified by the instruction sequence of the program, including various processing including information processing, conditional judgment, conditional branching, unconditional branching, information retrieval / replacement, etc., on the data read from RAM2014, and write the results back to RAM2014. In addition, CPU2012 can retrieve information from files, databases, etc. in a recording medium. For example, in a case where a plurality of entries are stored in a recording medium and the plurality of entries respectively have attribute values ​​of a first attribute related to an attribute value of a second attribute, it is possible that CPU2012 retrieves an entry that is consistent with the condition specified by the attribute value of the first attribute from the plurality of entries, and reads the attribute value of the second attribute stored in the entry, thereby obtaining the attribute value of the second attribute related to the first attribute that meets the predetermined condition.

[0070] The programs or software modules described above can be stored in a computer-readable storage medium on or near the computer 2000. A recording medium such as a hard disk or RAM provided in a server system connected to a dedicated communication network or the Internet can be used as the computer-readable storage medium. The program stored in the computer-readable storage medium can be provided to the computer 2000 via the network.

[0071] Programs installed on computer 2000 and causing computer 2000 to function as control system 200 can be run on CPU 2012 and other devices, causing computer 2000 to function as various components of control system 200. The information processing described in these programs is read into computer 2000, thereby enabling various components of control system 200 to function as specific means for the software to work in conjunction with the various hardware resources described above. By employing these specific means to perform calculations or processing of information corresponding to the intended use of computer 2000 in this embodiment, a unique control system 200 tailored to the intended use can be constructed.

[0072] Various embodiments are described with reference to block diagrams and the like. In the block diagrams, each block may represent (1) a step in a process in which an operation is performed or (2) a portion of a device that performs an operation. Specific steps and portions may be implemented by dedicated circuits, programmable circuits supplied with computer-readable instructions stored on a computer-readable storage medium, and / or processors supplied with computer-readable instructions stored on a computer-readable storage medium. Dedicated circuits may include digital circuits and / or analog hardware circuits, and may include integrated circuits (ICs) and / or discrete circuits. Programmable circuits may include logical AND, logical OR, logical XOR, logical NAND, logical NOR, and other logical operations, and reconfigurable hardware circuits including flip-flops, registers, memory elements such as field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), and the like.

[0073] A computer-readable storage medium may include any tangible device capable of storing instructions for execution by an appropriate device. Consequently, a computer-readable storage medium having instructions stored therein constitutes at least a portion of a product containing the following instructions, capable of executing the instructions for the purpose of providing a means for performing the operations specified by the process sequence or block diagram. Examples of computer-readable storage media include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, and the like. More specific examples of computer-readable storage media include floppy disks (registered trademark), optical disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), electrically erasable programmable read-only memory (EEPROM), static random access memory (SRAM), compact disk read-only memory (CD-ROM), digital versatile disks (DVD), Blu-ray disks (RTM), memory sticks, integrated circuit cards, and the like.

[0074] Computer-readable instructions may include assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or any source code or object code described using any combination of one or more programming languages ​​including object-oriented programming languages ​​such as Smalltalk, JAVA (registered trademark), C++, and existing procedural programming languages ​​such as the "C" programming language or similar programming languages.

[0075] Computer-readable instructions may be provided to a processor or programmable circuit of a general-purpose computer, a special-purpose computer, or other programmable data processing device via a local area network (LAN) or a wide area network (WAN) such as the Internet, and the computer-readable instructions may be executed for the purpose of providing a means for performing the operations specified by the described processing steps or block diagrams. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, and the like.

[0076] While the present invention has been described above using embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. Those skilled in the art will appreciate that various modifications or improvements can be made to the above embodiments. As can be seen from the claims, embodiments resulting from such modifications or improvements are also encompassed within the technical scope of the present invention.

[0077] It should be noted that the order in which the various processes, such as tasks, processes, steps, and stages, in the apparatuses, systems, programs, and methods described in the claims, specifications, and drawings may be executed in any order, unless specifically indicated by the phrases "before," "prior to," or "preceding," and unless a subsequent process specifies that the output of a previous process is to be used. For convenience, the workflows in the claims, specifications, and drawings may be described using phrases such as "first," "second," and the like. However, this does not necessarily imply that the processes must be executed in that order.

[0078] Description of Reference Signs

[0079] 10. Update the system

[0080] 20 vehicles

[0081] 70 servers

[0082] 90 Communication Network

[0083] 200 Control System

[0084] 201 TCU

[0085] 202 ECU

[0086] 204 ECU

[0087] 205 ECU

[0088] 206 ECU

[0089] 210 Communication devices

[0090] 211 Antenna

[0091] 280 In-vehicle communication network

[0092] 294 FI

[0093] 295 battery

[0094] 296 Locking Device

[0095] 298 MID

[0096] 299 IVI

[0097] 300 Processing Department

[0098] 380 Storage Department

[0099] 390 Ministry of Communications

[0100] 2000 Computer

[0101] 2010 Main Controller

[0102] 2012 CPU

[0103] 2014 RAM

[0104] 2020 Input / Output Controller

[0105] 2022 Communication Interface

[0106] 2024 Flash Memory

[0107] 2026 ROM

[0108] 2040 Input / Output Chip.

Claims

1. A control system, wherein: have: a communication device, provided on the mobile body, for communicating with an external server; and an update control unit that controls program update of a mobile body control unit that controls the mobile body, The communication device includes a communication control unit that controls communication with the server, and controls communication with the mobile body control unit and communication with the update control unit. The communication control unit receives a first activation request and a command from the server to the mobile body control unit when the server controls the mobile body control unit, activates the mobile body control unit based on the first activation request and command from the server, and controls the mobile body control unit based on the command. The communication control unit receives a second activation request from the update control unit from the server when performing control related to program update of the mobile body control unit from the server, activates the update control unit based on the second activation request from the server, and transmits a receipt notification indicating receipt of the second activation request to the update control unit after establishing a communication link between the communication control unit and the update control unit. The update control unit transmits a command request to the server when receiving the reception notification from the communication control unit, and when receiving a command from the server, performs a process corresponding to the command received from the server.

2. The control system according to claim 1, wherein: After instructing the update control unit to activate, the communication control unit performs control to transmit information indicating that the update control unit has activated to the server if the update control unit has activated.

3. The control system according to claim 1 or 2, wherein: The communication device receives a third activation request from the server to the communication device before receiving the second activation request from the server. After the communication device is activated in response to the third activation request, the communication control unit performs control to receive the second activation request from the server.

4. The control system according to claim 3, wherein: The communication device receives the third activation request via a circuit switching network of a mobile communication network, After the communication device is activated in response to the third activation request, the communication control unit controls communication with the server via the packet switching network.

5. The control system according to claim 1 or 2, wherein: When the communication control unit is capable of communicating with the server via the wireless LAN, the communication control unit performs communication between the update control unit and the server via the wireless LAN after the update control unit is activated. When communication with the server via the wireless LAN is impossible, the communication control unit relays communication between the update control unit and the server via the mobile communication network after the update control unit is activated.

6. The control system according to claim 1 or 2, wherein: The mobile object is a vehicle.

7. The control system according to claim 1 or 2, wherein: The movable body control unit is further provided.

8. A mobile object, wherein: A control system according to any one of claims 1 to 7 is provided.

9. A communication control method, performed by a communication device, the communication device being provided on a mobile body and communicating with a server, wherein: The communication device includes a communication control unit that controls communication with the server, controls communication with a mobile body control unit that controls the mobile body, and controls communication with an update control unit that controls program updates of the mobile body control unit. The communication control method comprises the following steps: When the mobile body control unit is controlled by the server, the communication control unit receives a first activation request and a command from the server for the mobile body control unit, activates the mobile body control unit in accordance with the first activation request and command from the server, and controls the mobile body control unit in accordance with the command; In a case where control related to program update of the mobile body control unit is performed from the server, the communication control unit receives a second activation request from the update control unit from the server, activates the update control unit in accordance with the second activation request from the server, and after establishing a communication link between the communication control unit and the update control unit, transmits a receipt notification indicating receipt of the second activation request to the update control unit; and The update control unit transmits a command request to the server when receiving the reception notification from the communication control unit, and when receiving a command from the server, performs a process corresponding to the command received from the server.

Images